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BACKGROUND 



CD 1. Field of Invention 

s 

q This invention relates generally to semiconductor 

^20 memories and specifically to content addressable memories. 

ru 

FU 

«1 2. Description of Related Art 

Packets of data are relayed across the Internet 
according to an Internet Protocol (IP) addressing scheme. One 
25 commonly used IP addressing scheme is known as IPv4. An IPv4 
address is a 32 -bit binary address segmented into Network and 
Host address fields. IPv4 addresses are typically grouped 
into classes depending upon how many bits are in the Network 
field. For example, Class A, B, and C IPv4 addresses have 8- 
30 bit, 16-bit, and 24-bit Network fields, respectively. Due to 
static field boundaries, the classfull IPv4 addressing scheme 
generally results in inefficient use of address space. 

A classless IP addressing scheme commonly known as 
Classless Inter-Domain Routing (CIDR) allows for a floating 
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boundary between the Network and Host fields to more 
efficiently utilize address space. A CIDR address may be 
expressed as a standard 32 -bit IPv4 address followed by a 
prefix Z, i.e., IPv4/Z, where the prefix Z indicates the 
number of bits in the Network field (and thus the prefix 
length of the CIDR address) . For instance, a CIDR address of 
168.69.48.112/12 has a 12-bit Network field and a 20-bit Host 
field. 

For routing applications, CIDR addresses are typically 
stored in a searchable table such as a content addressable 
memory (CAM) device. A CAM device includes an array having a 
plurality of rows of CAM cells for storing a plurality of CAM 
words, e.g., CIDR addresses. During compare operations, a 
comparand word or search key is compared with all the CAM 
words in the device. For each CAM word that matches the 
comparand word, a corresponding match line signal is asserted 
to indicate the match condition. If the comparand word 
matches more than one of the CAM words, the match line 
corresponding to each of the matching CAM words is asserted, 
and a multiple match flag is also asserted to indicate the 
multiple match condition. The match line signals are 
typically provided to a priority encoder to determine the 
index or address of the highest -priority matching (HPM) CAM 
word. 

For routing applications, it may be desirable to compare 
only the Network field portion of CIDR addresses stored in a 
CAM array with the search key. In such compare operations, 
the Host field portion of each CIDR address stored in the CAM 
array may be masked so that bits in the Host field portion do 
not participate in the compare operation. The Host field bits 
may be masked globally or locally. 
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In a binary CAM device, data entries stored in an array- 
are masked by a global mask. The global mask stores a mask 
pattern that masks a predetermined number of bits of each 
entry in the array. Because addresses within a classfull IPv4 
addressing scheme (e.g., Class A) each have the same prefix 
length, and thus the same number of Host field bits are to be 
masked during compare operations, binary CAM devices are 
useful for classfull IPv4 addressing schemes where all data 
entries have the same prefix. 

However, binary CAM devices are not well suited for CIDR 
addressing schemes in which the CAM data entries may have 
different prefix lengths, and thus require individual masks 
of different lengths. During compare operations, it is 
generally desirable to determine which matching CAM entry is 
the "best match' 7 or "longest prefix match" (LPM) , that is, 
which matching CAM entry has the longest prefix, (i.e., the 
fewest number of masked bits) . Because the global mask of a 
binary CAM device masks the same bits for each entry, 
numerous compare operations may be needed to determine the 
best match. For example, the global mask is initially set to 
not mask any bits for a first compare operation. If there is 
no match, the global mask is set to mask one column for a 
second compare operation, and so on until a match conditions 
occurs. The first compare operation that results in a match 
indicates the best match. Performing multiple compare 
operations per search key to determine the LPM requires 
considerable time, and therefore may limit performance. 

A ternary CAM array includes a local mask word for each 
row of CAM cells so that each entry in the ternary CAM array 
may be individually masked according to its prefix. The 
ability to individually mask each entry eliminates the need 
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for iterative compare operations per search key, thereby 
making ternary CAM devices well -suited for CIDR addressing 
schemes. In one scheme for CIDR address processing, the 
entries are pre-sorted in the ternary array such that entries 
with the longest prefix are stored at the highest priority 
locations (e.g., in the lowest CAM index), and entries with 
the shortest prefix are stored in the lowest priority 
locations (e.g., the highest CAM index). During a compare 
operation, a priority encoder generates the index of the 
highest -priority match, which is also the longest prefix ' 
match because of the ordering of the entries according to 
prefix length. Since the priority encoder determines the 
highest priority matching location based on predetermined 
address assignments, the ordering of entries in the ternary 
CAM array must be maintained in order to generate the correct 
results. The prioritizing of the word entries is typically 
performed by a table management hardware and/or software 
tool. Thus, when a new entry is written to the CAM array, the 
table management tool must re-order some or all of the 
entries in order to maintain proper ordering. The re-ordering 
of entries in the ternary CAM can add significant overhead to 
the associated router (e.g., delay and additional hardware 
and software) and may limit performance. 

In other schemes for CIDR address processing in a 
ternary CAM, such as those described in US Patent Application 
No. 09/338,452 entitled METHOD AND APPARATUS FOR DETERMINING 
A LONGEST PREFIX MATCH IN A CONTENT ADDRESSABLE MEMORY DEVICE 
and US Patent Application No. 09/406,170 entitled METHOD AND 
APPARATUS FOR PERFORMING PACKET CLASSIFICATION FOR POLICY 
BASED PACKET ROUTING, entries may be stored in the ternary 
CAM array in any order (regardless of prefix length) . 
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Circuitry included within the ternary array itself or 
external to the ternary array can be used to resolve the 
longest prefix match. 

Because each row of CAM cells in a ternary CAM array 
includes an additional row of mask cells to store the local 
mask, ternary CAM devices are generally not able to store as 
many unique CIDR addresses as binary CAMs . 

It would be desirable to implement CIDR applications 
using binary CAM cells to achieve higher storage density 
without having to perform a lengthy sequence of compare 
operations for each search key, and to be able to add new CAM 
entries without having to re-order existing entries. 

SUMMARY 

A method and apparatus are disclosed that allow CIDR 
addressing schemes to be implemented using binary CAM cells 
without a multitude of compare operations per search key. In 
accordance with the present invention, a binary CAM array is 
segmented into a plurality of array groups, each of which 
includes a number of rows of binary CAM cells and an 
associated group global mask. Each array group may be 
assigned to a particular prefix length by storing a prefix 
mask pattern corresponding to the prefix length in the array 
group's associated group global mask. CIDR address entries 
are then stored in array groups assigned to corresponding 
CIDR prefixes so that an array group assigned to a particular 
prefix stores only CIDR addresses having that prefix. 

In other embodiments of the present invention, a ternary 
CAM array is segmented into a plurality of array groups, each 
of which includes a number of rows of ternary CAM cells. Each 
array group is assigned to a particular priority by storing 
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the priority number for each array group in an associated 
storage element. Data entries are then stored in array groups 
according to priority. 



5 BRIEF DESCRIPTION OF THE DRAWINGS 

The features and advantages of the present invention are 
illustrated by way of example and are by no means intended to 
limit the scope of the present invention to the particular 
embodiments shown, and in which: 
10 FIG. 1 is a block diagram of a CAM system having a CAM 

array segmented into a plurality of array groups in 
P accordance with one embodiment of the present invention; 

O FIG. 2 is a block diagram of one embodiment of the array 

m 

y=5 group of FIG. 1 ; 

CJl5 FIG. 3 is a block diagram of the CAM system of FIG. 1 

bl 

Sj including an exemplary embodiment of the index circuit of 

Q FIG. 1; 

FIG. 4 is a flow chart illustrating one embodiment of a 

ru 

nj compare operation for the CAM system of FIG. 3; 

512 0 FIG. 5A is a block diagram of one embodiment of the 

select circuit of FIG. 3; 

FIG. 5B is a block diagram of another embodiment of the 
select circuit of FIG. 3; 

FIG'. 6 is a block diagram of one embodiment of the table 
25 and compare circuit of FIG. 5B; 

FIG. 7 is a block diagram of the CAM system of FIG. 1 
including exemplary embodiments of the address circuit and 
index circuit of FIG. 1; 

FIG. 8 is a block diagram illustrating one embodiment of 
30 the NFA table of FIG. 7; 

FIG. 9 is a flow chart illustrating one embodiment of a 
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write operation for the CAM system of FIG. 7; 

FIG. 10 is a block diagram of one embodiment of the 
select circuit of FIG. 7; 

FIG. 11 is a block diagram of another embodiment of the 
select circuit of FIG. 7; 

FIG. 12 is a block diagram of another embodiment of the 
index circuit of FIG. 1; 

FIG. 13 is a block diagram of one embodiment of a 
ternary CAM array that may be used in the CAM system of FIG. 
1; 

FIG. 14 is a block diagram illustrating one embodiment 
of a row of the ternary CAM array of FIG. 13; 

FIG. 15 is a block diagram of one embodiment of a 
ternary array group of FIG. 13; 

FIG. 16 is a flow chart illustrating one embodiment of a 
compare operation for ternary embodiments of the CAM system 
of FIG. 1; 

FIG. 17 is a flow chart illustrating one embodiment of a 
write operation for ternary embodiments of the CAM system of 
FIG. 1. 

Like reference numerals refer to corresponding parts 
throughout the drawing figures. 

DETAILED DESCRIPTION 

Present embodiments are discussed below in the context 
of a CAM system 100 for simplicity only. It is to be 
understood that present embodiments are equally applicable to 
other CAM architectures of various sizes and configurations. 
For example, although described below in the context of 
synchronous embodiments, the present invention may be readily 
practiced in asynchronous embodiments. Further, although 
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compare and write operations for CAM system 100 are described 
below in the context of CIDR addresses, present embodiments 
may be used for applications other than CIDR addressing 
schemes. In addition, the particular logic levels assigned to 
5 signals discussed herein are arbitrary and, thus, may be 

reversed where desirable. Additionally, single signal lines 
may alternatively be multiple signal lines or busses, and 
multiple signal lines or busses may be single signal lines. 
Accordingly, the present invention is not to be construed as 
10 limited to specific examples described herein but rather 
LjL includes within its scope all embodiments defined by the 

0 appended claims. 

s 

!J! FIG. 1 shows a CAM system 100 in accordance with the 

1 present invention. CAM system 100 includes an address circuit 
U!l5 110, a CAM array 120, an index circuit 130, an instruction 

decoder 140, a read/write circuit 155, a decoder 170, and a 
comparand register 180. CAM array 120 is segmented into a 
number of groups 0 to n-1, each of which includes an array 
122 and an associated group global mask 126. Each array group 
rU20 122 (0) -122 (n-1) includes k rows of binary CAM cells for 

storing up to k data words such as, for example, the address 
portion of a CIDR address. For alternative embodiments, one 
or more of the array groups may have a different number of 
rows of CAM cells. Each row is coupled to a corresponding 

2 5 word line WL and a corresponding match line ML. The word and 

match lines for each array group 122 (0) -122 (n-1) are 
represented collectively in FIG. 1. Note that CAM system 100 
may be also operate upon IPv6 addresses or store other types 
of data entries other than CIDR addresses. 

3 0 Each array group 122 includes an extra column 124 of CAM 

cells for storing a valid bit (V bit) for each row in the 
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array group 122. Each V bit indicates whether a valid word is 
stored in the corresponding row. Upon reset or power-up, the 
V bits are initially de-asserted to logic 1 so as to indicate 
that CAM array 120 is empty, i.e., that none of the rows in 
CAM array 120 contain valid data. When a word is written to a 
row of CAM array 120, its corresponding V bit may be asserted 
to logic 0 in a well-known manner to indicate that the row 
contains valid data. In some embodiments, each row of CAM 
array group 122 may include two or more V bits to distinguish 
between an empty row and a row which contains invalid data 
(and may indicate other states such as, for instance, a skip 
state) . 

Each group global mask 126 (0) -126 (n-1) stores a mask 
pattern that masks each data entry in the corresponding array 
group 122 (0) -122 (n-1) . Each mask pattern represents the 
priority of the entries in the corresponding array groups 
relative to the entries in other array groups. Each array 
group may be assigned a unique priority number provided on 
the priority bus (PBUS) , or may be assigned the same priority 
number as one or more other array groups. The mask patterns 
generated from the priority numbers (e.g., by decoder 170) 
are used to globally mask the entries in the corresponding 
array group during a comparison with a search key or 
comparand data provided from comparand bus CBUS and/or 
comparand register 180. 

Each group global mask 12 6 includes an extra storage 
location 128 for storing a mask valid bit (MV bit) indicating 
whether a valid prefix mask pattern is stored in the 
corresponding group global mask 126. Upon reset or power-up, 
the MV bits are initially de-asserted to logic 1 so as to 
indicate that group global masks 126 are empty. When a mask 



P191-CIP/WLP 



9 



pattern is written to a group global mask 126, its MV bit 128 
may be asserted to logic 0 to indicate that the group global 
mask 126 contains a valid mask pattern, and also that the 
associated array group 122 is assigned to a corresponding 
priority number. 

During compare operations, all matching entries (as 
masked by their group global masks) are reflected on the 
match lines of the respective groups and the match results 
provided to index circuit 130. Index circuit 130 determines 
the matching entry that has the highest priority number 
associated with it and generates the index or address of this 
highest priority matching entry (HPI) . If there are multiple 
array groups that have matching entries and they have the 
same priority number, or if there are multiple matching 
entries within a single array group, index circuit 130 
determines HPI based on which matching entry is stored in the 
lowest numerical address of array 120. For alternative 
embodiments, index circuit 13 0 may determine HPI based on 
entries stored in array 120 in other predetermined 
arrangements (e.g., at the highest numerical address). Index 
circuit 130 may also ' generate flag signals such a match flag 
signal, full flag signal, multiple match flag signal and the 
like . 

Index circuit 13 0 may also generate the next free 
address (NFA) that is available in array 120 for storing a 
new data word. The NFA may be updated after each write 
operation to array 120. Address circuit 110 enables one of 
the word lines in response to NFA to select the free address 
in one of the array groups. As used in present embodiments, 
the NFA is the numerically lowest available CAM address that 
is assigned to a specified priority number assigned to one or 
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more groups. For other embodiments, the NFA may be the 
numerically highest available CAM address for the specified 
priority number, or any other predetermined priority address. 
The NFA includes first and second address portions, where the 
first portion includes a number of most significant bits 

(MSBs) of the NFA that identifies the group address 0 to n-1 
that is the address of the group global mask for an array 
group 122 assigned a particular priority number, and the 
second portion includes the remaining least significant bits 

(LSBs) of the NFA that identify the next free available row 
within the array group 122 having the particular priority 
number. The first and second portions of the NFA are 
hereinafter referred to as the group NFA (NFA_G) and the 
array NFA (NFA_A) , respectively. For example, because there 
are n-1 array groups 122 (0) -122 (n-1) each having k rows of 
CAM cells, the NFA__G portions is x = log 2 n bits wide and NFA_A 
is y = log 2 k bits wide. 

CAM system 100 includes instruction decoder 140 that 
receives instructions such as write, read, and compare 
instructions from an instruction bus IBUS and a clock signal 
CLK. In response thereto, the instruction decoder provides 
one or more control signals to address circuit 110, comparand 
register 180, and read/write circuit 155. Instruction decoder 
140 may also provide other signals to the other circuits. For 
one embodiment, instruction decoder 14 0 may be a ROM or other 
type of control logic. Instruction decoder 140 may also 
include a timing generator to generate control signals at 
appropriate times relative to CLK. 

For write and read operations, an explicit address may 
be provided to address circuit 110 via the address bus ABUS, 
or the NFA may be used to identify the intended group and row 
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in array 120. In response to one or more control signals from 
instruction decoder 140, address circuit 110 accesses a row 
in one of the array groups by asserting its word line to an 
active state. Data may be written to or read from the 
accessed row by read/write circuit 155. Read/write circuit 
155 also includes inputs to receive CLK and one or more 
control signals from instruction decoder 140. For one 
embodiment, read/write circuit 155 may output data to a 
results bus (not shown in FIG. 1) rather than to CBUS . For 
another embodiment, read/write circuit 155 may receive data 
from a data bus (not shown in FIG. 1) rather than from CBUS. 
Additionally, address circuit 110 may also select one of the 
group global masks for writing and reading priority numbers 
via read/write circuit 155. For one embodiment, ABUS may be 
eliminated, and the external address provided to address 
circuit 110 via CBUS. Address circuit 110 may include one or 
more decoders. Address circuit 110 may also include an NFA 
table (not shown in FIG. 1) that stores an NFA for each 
priority. As will be described in more detail below, each 
entry in the NFA table may be selected in response to an 
input priority number provided on the PBUS . 

System 100 may operate as a CIDR processing system by 
storing the IP address portion of CIDR addresses in array 
120. The remainder of this application will discuss CAM 
system 100, and its various embodiments, in the context of a 
CIDR processing system. However, system 100 may be used to 
store and operate upon any types of groups of data wherein 
each data group has an associated priority relative to the 
other groups . 

Each array group 122 (0) -122 (n-1) that stores a CIDR 
address is assigned a priority number equal to its CIDR 
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prefix. The prefix number PFX is provided on the PBUS and is 
decoded by decoder 170 to generate an equivalent prefix mask 
pattern PFX_MSK for the corresponding group global mask 
126 (0) -126 (n-1) . For example, the first array group 122(0) 
5 may be assigned to a prefix of 12 by storing a prefix mask 
pattern in group global mask 126(0) that will mask the 20 
least significant (e.g., right-most) bits of entries stored 
in array group 122(0) during compare operations so that only 
the 12 most significant bits are compared with the search 
10 key. Once an array group is assigned to a prefix, only CIDR 
addresses having that prefix are stored in that array group. 

^ For example, if array group 122(0) is assigned to the prefix 

□ 

of 12, only CIDR addresses having a prefix of 12 are stored 
in array group 122(0). If array group 122(0) becomes full, 

Dl5 then another available array group is also assigned to the 

U1 

(Q prefix of 12. Thus, in accordance with the present invention, 

p the prefix of a CIDR address is used to determine into which 

H- of array groups 122 (0) -122 (n-1) the corresponding IP address 

ry 

m is written. 

!y?20 The array groups can be assigned any prefix in any 

ry 

order, and more than one array group may be assigned the same 
prefix. The prefix assigned to an array group indicates a 
relative priority of the entries within the array group as 
compared with the entries of the other array groups. For 

25 example, the array groups with the highest prefix numbers 
will have a higher priority than array groups with lower 
prefixes as the array groups with higher prefixes will have 
more unmasked bits. For alternative embodiments, priority may 
be reversed or otherwise determined. 

3 0 The match lines of each array group are provided to 

index circuit 13 0 to determine the highest priority longest 
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prefix match or best match from among the entries in CAM 
array 12 0 that match the input search key as masked by the 
prefix masks. For purposes of discussion herein, the first 
array group 122(0) includes the lowest CAM addresses (i.e., 
5 addresses 0 to k-1) , array group 122(1) includes the next 

lowest CAM addresses (i.e., addresses k to 2k-l) , and so on, 
and array group 122 (n-1) includes the highest CAM addresses 
(i.e., addresses (n-l)k to nk-1) . For alternative 
embodiments, the order of the addresses may be reversed or in 
10 another sequence. Index circuit 130 generates HPI as the 

address or index of the highest priority longest prefix match 

O in array 12 0 in response to the match signals output by each 

G 

Iff of the array groups. For one embodiment, index circuit 130 

2 includes a priority encoder that receives the match lines and 

111 15 encodes an address. The priority encoder may also determine 

m 

an address amongst several matching entries that have the 
same longest prefix match using the relative numerical 

fy locations of the entries in array 120. 

fU 

For one embodiment, each row in array groups 122(0)- 
PJ 20 122 (n-1) includes 32 CAM cells to store a 32-bit IPv4 

address, and each group global mask 126 (0) -126 (n-1) includes 
32 storage locations to store a 32 -bit prefix mask pattern. 
In other embodiments, each row in array groups 122 (0) -122 (n- 
1) may include any number of CAM cells, and group global 
25 masks 126 (0) -126 (n-1) may include any number of storage 
locations. In one embodiment, group global masks 126(0)- 
126 (n-1) may include fewer storage locations than the number 
of CAM cells in each row each of CAM array 120. 

Decoder 170 has an input to receive a prefix PFX on the 
3 0 PBUS, and in response thereto provides a decoded prefix mask 
pattern PFX_MSK to read/write circuit 155. The prefix PFX may 
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be generated by external control logic in, for example, a 
router incorporating CAM system 100. PFX may be encoded to 
reduce the number of signal lines on PBUS, and then decoded 
by decoder 170 to generate PFX_MSK. Thus, if each global mask 
12 6 has 2 m bits, then the PBUS may carry m encoded bits of 
prefix data. For one embodiment, where each group global mask 
126 has 32 bits, PBUS carries 5 encoded prefix bits. Decoder 
170 provides PFX_MSK to read/write circuit 155, which in turn 
provides PFX_MSK to one or more group global masks 126(0)- 
126 (n-1) . 

For one example, a CIDR address with a binary encoded 
prefix of 11000, which corresponds to the decimal number 24, 
has a 24-bit prefix and, thus only its 24 left-most bits are 
to participate in compare operations. The encoded prefix 
11000 may be decoded or expanded by prefix decoding logic 170 
into 11111111 11111111 11111111 00000000 such that the 24 
most significant bits are logic ones and 8 least significant 
bits are logic zeros. Decoder 170 (or other logic) may 
logically complement this data to form the prefix mask 
pattern of 00000000 00000000 00000000 11111111 such that the 
24 most significant bits are logic zeros and 8 least 
significant bits are logic ones. This prefix mask pattern can 
be loaded into one or more of group global masks 126(0)- 
126 (n-1). For this example, a logic zero mask bit indicates 
that corresponding bit locations in the associated array 
group 122 are not masked. For an alternate embodiment, a 
logic one mask bit may indicate that a corresponding bit 
location in the associated array group is not masked, and 
decoder 170 may not logically complement the mask data prior 
to loading it into group global masks 126. 

As indicated above, index circuit 13 0 receives match 
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information provided on k match lines ML from each array 
group 122 (0) -122 (n-1) . Index circuit 130 also receives the V 
bits and MV bits from each array group 122 (0) -122 (n-1) , and 
receives PFX from PBUS . The V bits may be provided over the 
match lines or, alternatively, over separate signal lines. 
Prefix assignment information for array groups 122 (0) -122 (n- 
1) is also provided to index circuit 13 0. For one embodiment, 
the prefix assignment information is provided to index 
circuit 130 from CAM array 120 by, for example, providing the 
prefix mask patterns stored in group global masks 126(0)- 
126 (n-1) to index circuit 130. For another embodiment, index 
circuit 13 0 includes a table for storing prefix assignments 
for array groups 122 (0) -122 (n-1) . In response to the match 
information and the prefix assignment information, index 
circuit 13 0 generates the index of the highest priority LPM 
(HPI) . 

FIG. 2 shows array group 200 that is one embodiment of 
an array group 122 of FIG. 1. Array group 2 00 includes a 
plurality of CAM cells 202 and a corresponding group global 
mask 126, and is coupled to address circuit 110, read/write 
circuit 155, and comparand register 180. CAM cells 202 may be 
organized in any number of rows and columns, with each row 
coupled a match line ML and a word line WL. CAM cells 202 may 
be any well-known binary CAM cell. For simplicity, 
connections to CLK are not shown in FIG. 2. 

The word lines WL are selectively driven by address 
circuit 110 in response to either ADDR or the NFA to select 
one or more rows of CAM cells 2 02 for read and/or write 
operations. Each match line ML indicates the match results of 
a compare operation for its corresponding row. A match line 
ML indicates a match condition for the row only if all 
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unmasked CAM cells 202 in that row match the search key. In 
some embodiments, the match line ML is pre-charged for the 
compare operation. If any unmasked CAM cell 202 in the row 
does not match the search key, the CAM cell(s) 202 discharges 
5 the match line ML toward ground potential (e.g., logic 0) to 
indicate the mismatch condition. Otherwise, if all unmasked 
CAM cells 202 match the search key, the match line ML remains 
in a charged state (e.g., logic high) to indicate the match 
condition . 

10 Each column of CAM cells 202 is coupled to a bit line 

BL, a complementary bit line BL , a comparand line CL, and a 

M 1 " 

Q complementary comparand line CL . The bit lines BL and BL are 

yf coupled to read/write circuit 155, which in turn may enable 

m 

pj data to be written to or read from a row of CAM cells 202 or 

W 15 the group global mask 126. Read/write circuit 155 is well- 

fft 

I known, and may include write drivers or buffers to provide 

P — 

j2 data to BL and BL , and may include sense amplifiers to 

determine the logic states of BL and BL . Comparand lines CL 

and CL are coupled to group global mask 12 6. Each group 
20 global mask 126 (0) -126 (n-1) is also coupled to comparand 
register 180 via global comparand lines GCL. 

To write or read a PFX_MSK to selected array group 2 00, 
address circuit 110 selects the group global mask 126 
associated with the selected array group 200 by asserting a 
2 5 corresponding select signal SEL in response to NFA or an 

external address ADDR, and read/write circuit 155 provides 
the prefix mask pattern PFX_MSK to, or reads it from, the 

group global mask over BL and BL . Similarly, to write or read 
an entry in a row of array group 200, address circuit 110 
30 selects the row of CAM cells associated with the selected 
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array group 200 by asserting a corresponding WL in response 
to NFA or an external address ADDR, and read/write circuit 
155 provides the entry to, or reads the entry from, the 

select row of CAM cells over BL and BL . 

For compare operations, comparand register 180 provides 
the search key from CBUS to group global mask 12 6 via global 
comparand lines GCL. In response to the prefix mask pattern 
stored therein, the group global mask 12 6 provides, via 

corresponding comparand lines CL and CL , a selectively masked 
search key to the array group 200 for comparison with entries 
stored therein. For example, for each prefix mask bit 
indicating that the corresponding bit of entries in array 
group 200 is to be masked, group global mask 126 drives the 

corresponding comparand line pair CL and CL to the same 
predetermined state (e.g., logic 0) so that CAM cells 202 
coupled thereto will indicate a match condition, irrespective 
of data stored therein. Conversely, for each prefix mask bit 
indicating that the corresponding bit of entries stored in 
array group 200 is not to be masked, group global mask 126 

drives the corresponding comparand lines pair CL and CL in 
response to the corresponding search key bit. In this manner, 
the prefix mask pattern stored in group global mask 126 
effectively masks word entries stored in associated array 
group 2 00. 

In alternate embodiments, other CAM array architectures 
may be used. For example, in some embodiments, CAM array 20 0 

may not include complementary comparand lines CL and CL , in 

which case the complementary bit lines BL and BL may be 
coupled to comparand register 180 via group global mask 126 
and be used to perform a compare operation as is generally 
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known in the art. For other embodiments, only one of 

comparand lines CL and CL or bit lines BL and BL may be 
needed. 

By segmenting CAM array 12 0 into a plurality of array 
group 122 (0) -122 (n-1) , and assigning each array group 122(0)- 
122 (n-1) to a particular prefix, present embodiments are able 
to perform search operations for CIDR addressing schemes 
using binary CAM cell technology in a single compare 
operation, i.e., without having to perform a number of 
compare operations per search key in which the prefix mask 
pattern is incrementally changed in order to determine the 
LPM. Implementing CIDR applications using binary CAM cells, 
rather than ternary CAM cells, advantageously allows for 
greater storage density. Further, as described below, present 
embodiments allow new entries to be written into CAM array 
120 without having to re-prioritize or re-order existing 
entries, thereby eliminating or reducing the overhead for 
table management hardware and/or software tools used to 
maintain a proper priority order for CIDR addresses. 

For alternative embodiments, array 12 0 may be a CAM 
array of ternary CAM cells. 

Compare operations to CAM array 12 0 are described below 
with respect to FIGS. 3 and 4. For simplicity, clock signals 
such as CLK are not shown in FIG. 3. For the discussion of 
the exemplary compare operation that follows, CAM array 12 0 
is assumed to already have a number of IPv4 addresses stored 
in one or more of array groups 122 (0) -122 (n-1) according to 
prefix length. Thus, one or more of array group 122 (0) -122 (n- 
1) is already assigned to a particular prefix, and associated 
group global masks 126 (0) -126 (n-1) already store 
corresponding prefix mask patterns. The array groups may be 
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assigned prefixes in any order unrelated to their physical 
location in array 120. That is, the array groups do not have 
to be sorted in array 120 based on their prefixes. 

FIG. 3 shows an index circuit 3 00 that is one embodiment 
of index circuit 130 of FIG. 1. Index circuit 300 includes a 
match line (ML) select circuit 302 and a priority encoder 
304. ML select circuit 302 has inputs to receive match 
information from array groups 122 (0) -122 (n-1) via match lines 
ML (0) -ML (n-1) , and includes outputs to provide corresponding 
qualified match information to priority encoder 304 via 
qualified match lines QML (0) -QML (n-1) . For one embodiment, ML 
select circuit 3 02 may include a table (not shown in FIG. 3) 
for storing prefixes for array groups 122 (0) -122 (n-1) . 
Alternately, ML select circuit 302 may receive prefix 
information from group global masks 126 (0) -126 (n-1) . Priority 
encoder 3 04 is well-known and, in response to the qualified 
match signals on lines QML, determines the index of the 
highest priority longest prefix match (HPI) . For one 
embodiment, HPI is the lowest address value at which a 
matching entry is located, although in other embodiments 
priority may be reversed. 

Referring also to the flow chart of FIG. 4, during 
compare operations, a search key is provided to CAM array 12 0 
and compared with entries stored in array groups 122(0)- 
122 (n-1) as masked by the prefix mask patterns stored in 
corresponding group global masks 126 (0) -126 (n-1) (step 402). 
For each matching entry, the corresponding match line ML is 
asserted to indicate the match condition. If there is a match 
in one or more array groups 122 (0) -122 (n-1) , as tested in 
step 404, ML select circuit 302 uses the prefix assignments 
for array groups 122 (0) -122 (n-1) to select which of the array 



P191-CIP/WLP 



20 



groups 122 (0) -122 (n-1) with one or more matching entries is 
assigned to the longest prefix (step 406) or highest 
priority. In response thereto, ML select circuit 302 
qualifies or allows the match signals from the selected array 
group 122 to pass to priority encoder 304, and disqualifies 
the match signals from all other array groups 122 by, for 
instance, forcing their corresponding qualified match lines 
QML to a mismatch state (e.g., ground potential) (step 408). 
If more than one array group 122 is assigned the longest 
prefix, ML select circuit 302 enables the match signals from 
each such "matching" array group 122 to pass through to 
priority encoder 304. Priority encoder 304 then generates HPI 
in response to the qualified match signals on QML (step 410) . 
Because only the match signals corresponding to the array 
group (s) 122 that have the longest prefix are considered by 
priority encoder 3 04, priority encoder 3 04 generates the 
appropriate HPI regardless of how the prefixes are assigned 
to the various array groups. That is, the array groups do not 
have to be sorted by prefix or physical location. 

FIG. 5A shows a select circuit 500 that is one 
embodiment of select circuit 302 of FIG. 3. Select circuit 
500 includes match flag circuits 502 (0) -502 (n-1) , enable 
logic circuits 504 (0) -504 (n-1) , and a compare circuit 506. 
Each match flag circuit 502 (0) -502 (n-1) is a conventional 
match flag circuit that receives match signals via match 
lines ML from a corresponding array group 122 (0) -122 (n-1) 
and, in response thereto, generates a corresponding group 
match flag GMF (0) -GMF (n-1) , which are provided as inputs to 
compare circuit 506. The group match flags indicate whether 
there is at least one matching entry in the corresponding 
array group. Enable logic circuits 504 (0) -504 (n-1) each 
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include first inputs to receive match signals via the match 
lines ML from a corresponding array group 122 (0) -122 (n-1) , a 
second input to receive a corresponding group enable signal 
GEN (0) -GEN (n-1) from compare circuit 506, and outputs to 
provide corresponding qualified match signals QML (0) -QML (n-1) 
to priority encoder 304. For one embodiment, logic gates 
504 (0) -504 (n-1) are AND gates that qualify or enable the 
match results to be provided to priority encoder 3 04 in 
response to GEN (0) -GEN (n-1) . 

For each group match flag that indicates a match, 
compare circuit 506 compares the prefix stored in the 
associated group global mask with the prefixes from the other 
array groups that have a matching entry (as indicated by 
their group match flags) . Compare logic 506 then asserts to 
an active state the group enable signal associated with the 
array group that has a matching entry and has the longest 
(highest) prefix. If there is more than one array group with 
a matching entry that have the same longest prefix, then the 
group enable signals associated with all such array groups 
are activated. Compare circuit 506 deactivates all other 
group enable signals. 

In response to GEN (0) -GEN (n-1) , respective enable logic 
circuits 504 (0) -504 (n-1) either qualify (enable) or 
disqualify (disable) match signals from corresponding array 
groups 122 (0) -122 (n-1) to be provided to and considered by 
priority encoder 304 in generating HPI . For example, if 
GEN ( 0 ) is activated, which indicates that array group 122(0) 
has a match and is assigned to the longest prefix, logic gate 
504(0) allows the match signals on match lines ML(0) to pass 
to priority encoder 304 as qualified match signals QML(0). 
Conversely, if GEN ( 0 ) is deactivated, which indicates that 
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array group 122(0) either does not have a match or does not 
have a match with the longest prefix, logic gate 504(0) 
disqualifies the match signals on match lines ML(0) by 
forcing qualified match signals on QML(O) to a mismatch 
state. 

The enable logic circuits may also be replaced with a 
multiplexer. 

Figure 5B shows an alternative embodiment of select 
circuit 500 of Figure 5A. In this embodiment, compare circuit 
506 does not receive the prefixes from the group global masks 
themselves; rather, table 508 is programmed with the 
corresponding prefixes PFX (0) -PFX (n-1) . As shown, table 508 
stores prefixes PFX (0) -PFX (n-1) in rows 508 (0) -508 (n-1) , 
respectively, for corresponding array groups 122 (0) -122 (n-1) . 
Table 508 may be programmed at the same time that the 
prefixes are written into the group global masks, at reset, 
upon initialization, or at any other time. The compare 
circuit 506 operates as in Figure 5A in which the group match 
flags indicate which programmed prefixes are compared with 
each other to determine the group enable signals. 

As in Figure 5A, the enable logic circuits may be 
replaced with a multiplexer. 

FIG. 6 shows a priority table 600 that is one embodiment 
of table 508 and compare circuit 506 of FIG. 5B. Priority 
table 600 includes a priority memory 602 and priority logic 
604. Priority memory 602 is one embodiment of table 508 and 
includes n-1 rows 606 (0) -606 (n-1) each for storing a prefix 
PFX for a corresponding array group 122 (0) -122 (n-1) . For 
example, row 606(0) stores the prefix PFX(0) assigned to 
array group 122 (0) . The prefixes may be stored in memory 602 
in an encoded form. Each row 606 (0) -606 (n-1) receives a 
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corresponding group match flag GMF (0) -GMF (n-1) that enables 
the corresponding prefix to be compared with the other 
prefixes. Priority memory 602 may be any type of memory array 
including volatile, non-volatile, random access memory (RAM) , 
and/or read only access memory (ROM) . For one embodiment, 
priority memory 602 comprises a CAM array. Priority memory 
602 may be p bits wide to accommodate Z = 2 P entries, where p 
is any number. For one embodiment, priority memory 602 is 5 
bits wide to accommodate up to 2 5 = 32 prefixes, as shown in 
the embodiment of FIG. 6. 

Priority logic 604 is one embodiment of compare circuit 
506 and compares the prefixes PFX (0) -PFX (n-1) corresponding 
to array groups 122 (0) -122 (n-1) that have a match, as 
indicated by respective signals GMF (0) -GMF (n-1) , with each 
other to determine which matching array group 122 has the 
longest prefix, and in response thereto selectively asserts 
one or more of signals GEN (0) -GEN (n-1) so that only the match 
signals from matching array groups 122 that have the longest 
prefix are considered by priority encoder 304. A more 
detailed discussion of priority table 600, as well as other 
exemplary embodiments thereof, may be found in co-pending and 
commonly owned US Patent Application No. 09/406,170 entitled 
METHOD AND APPARATUS FOR PERFORMING PACKET CLASSIFICATION FOR 
POLICY BASED PACKET ROUTING, which is incorporated by 
reference herein. 

The prefixes PFX (0) -PFX (n-1) may be written into 
priority memory 602 in any suitable manner. For one 
embodiment, when address decoder 114 selects one of group 
global masks 126 (0) -126 (n-1) to store a prefix mask pattern 
for a particular prefix PFX, address decoder 114 may also 
select a corresponding row 606 in priority memory 602 so that 
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the prefix PFX may be written thereto. For this embodiment, 
priority table 600 may include an input to receive PFX. 

Figure 12 shows index circuit 12 00 that is another 
embodiment of index circuit 130 of FIG. 1. Index circuit 1200 
includes the match flag circuits 502 (0) -502 (n-1) for each 
array group as in the embodiments of figures 5A and 5B, and 
table 508 and compare circuit 506 as in Figure 5B. In 
addition, each array group 122 (0) -122 (n-1) has its match 
lines coupled to provide its match results to local priority 
encoders 1202 (0) -1202 (n-1) , respectively. In response to a 
compare operation, the local priority encoders determine 
local match indices LMI (0) -LMI (n-1) that each indicate the 
highest priority match (if any) within a particular group. 
Only those groups that have the same priority as the search 
key will output valid local match indices if they have a 
match. Otherwise, they may output a default state. The local 
match indices are then provided to select circuit 1208. 
Select circuit 1208 outputs one of the local match indices as 
the least significant bits of HPI in response to an input 
from decoder 1206 that indicates which array group (s) has the 
same priority as the input search key. If more than one array 
group is assigned the same prefix and the search key has a 
match, select circuit 1208 will select the local match index 
from the array group having the lowest numerical addresses. 
For alternative embodiments, the array group having the 
highest numerical addresses may be selected, or other 
predetermined orders may be used. Select circuit may be one 
or more multiplexers or equivalent circuitry. 

The input to select circuit 1208 from decoder 1206 is 
determined, for example, as follows. The match flag circuits 
determine if a particular array group has a match. If so, the 
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match flag circuit activates its group match flag. An 
activated group match flag enables the prefix for the 
corresponding array to be compared by compare circuit 506 
with other prefixes from other arrays that also have a match. 
5 For each prefix entry in table 508, compare circuit 506 

generates a GEN signal. The GEN signals are then encoded by 
priority encoder 12 04 to determine the most significant bits 
of HPI . The most significant bits are also decoded by decoder 
1206 to select one of the local match indices. 
10 For alternative embodiments of Figure 12, the MV bits 

may be multiplexed with the GMF signals as enable inputs to 
table 508 based on the operation. For example, during a 

o 

q compare operation the GMF signals may be provided to table 

508 as described above, and during NFA operations, the MV 

bl 

p 15 bits may be provided to table 508. Additionally, for the NFA 

in 

01 operation, the V bits may be provided to the local priority 

5 encoders and their outputs provided to select circuit 1208. 

□ 

This alternative may also be used for the embodiments of 
^ Figures 3, 4, 5A, and 5B. 

U20 With reference again to Figure 1, as described above, 

nj 

new entries are written into an array group having the same 
prefix or priority number as the new entry. After a new entry 
has been written to an array group the index circuit 13 0 
generates a new NFA for that particular prefix. The new NFA 

25 may be in the same array group if there are still available 
entries in the group (i.e., it is not full yet). However, if 
the last write operation filled the array group, then a new 
available array group can be assigned to the corresponding 
prefix and the NFA for that prefix assigned to indicate an 

3 0 address in the new array group. 

Figure 7 shows one embodiment of the address circuit and 
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index circuit of Figure 1 for updating the NFAs associated 
with assigned prefixes or priority numbers in array 120. For 
simplicity, clock signals such as CLK are not shown in FIG. 
7. Address circuit 702 is one embodiment of address circuit 
110 of FIG. 1, and includes a prefix decoder 111, an NFA 
table 112, an array decoder 114, a group decoder 117, a 
select circuit 115, and write control circuit 116. Prefix 
decoder 111 has an input to receive a prefix PFX from the 
PBUS, and in response thereto provides decoded signals to NFA 
table 112. NFA table 112 has inputs to receive NFA_A from 
array priority encoder (PE) 716 and NFA__G from group priority 
encoder (PE) 712, and outputs to provide a selected NFA 
(e.g., NFA_G plus NFA_A) to select circuit 115 in response to 
one or more control signals from instruction decoder 140. 
Instruction decoder 14 0 provides the one or more control 
signals to NFA table 112 in response to receiving a write 
instruction on the IBUS. Select circuit 115 also receives 
ADDR and one cr more control signals from write control 
circuit 116. The control signals from write control circuit 
116 indicate whether select circuit 115 should provide 
information from NFA table 112 or ADDR to address decoder 114 
or group decoder 117 to select a WL of a row of CAM cells or 
group global mask, respectively, in array 120 for writing or 
reading. For one embodiment, select circuit 115 is one or 
more multiplexing circuits. 

Referring also to FIG. 8, NFA table 112 includes 32 rows 
10 1 0 — 101 3 i, although in other embodiments NFA table 112 may 
include any number of rows 101. Each row 101 of NFA table 112 
stores the NFA in array 120 for a particular prefix, where 
the logical address of each row 101 indicates the prefix 
length. For example, row 101 0 stores the NFA for PFX = 0, row 
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101i stores the NFA for PFX = 1, and so on. Each row 101 of 
NFA table 112 includes a first field 102 to store an NFA_G 
for the prefix stored in the row, a second field 103 to store 
an NFA_A for the prefix stored in the row, and a third field 
104 to store an empty or valid bit (E bit) indicating whether 
there is an NFA calculated for the prefix (and thus whether 
an array group 122 has been assigned to the prefix) . 
Initially, the E bits 104 are set to logic 0 to indicate that 
there are no NFA entries stored in corresponding rows 101 of 
NFA table 112. An E bit will be updated to a logic 1 if a new 
entry is written into array 120 that has an associated prefix 
that was not previously assigned to an array group. The use 
of NFA table 112 and the other elements of address circuit 
702 will be described in further detail below. 

For an alternative embodiment, prefix decoder 111 may be 
omitted and each prefix may be stored in CAM cells in NFA 
table 112. For this embodiment, when a new entry is presented 
for writing in array 12 0, its associated PFX may be compared 
with the entered prefixes in the NFA table, and the 
corresponding NFA read from the matching entry. 

Index circuit 704 is one embodiment of index circuit 130 
of FIG. 1, and is shown to include a Vbit select circuit 711, 
a group priority encoder 712, an array priority encoder 716, 
and full flag logic 715. Full flag logic 715 and priority 
encoders 712 and 716 are well-known. Vbit select circuit 711 
includes inputs to receive the V bits from rows of CAM cells 
in each array group 122 (0) -122 (n-1) . 

In response to the V bits and corresponding prefix 
assignment information, select circuit 711 provides qualified 
valid bits (QV bits) to array priority encoder 716 and full 
flag logic 715. For one embodiment, the prefix assignment 
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information may be stored in a table (not shown in FIG. 7) 
within Vbit select circuit 711. In response to the QV bits, 
full flag logic 715 generates a full flag signal FF to 
indicate a full condition for array groups 122 (0) -122 (n-1) 
5 having a specified prefix. For one embodiment, FF is asserted 
to logic 1 to indicate the full condition, and de-asserted to 
logic 0 to indicate a not full condition. The full flag 
signal may be provided to write control logic 116. Also, in 
response to the QV bits, priority encoder 716 generates NFA__A 
10 for a corresponding prefix. Group priority encoder 712 has 
inputs to receive a mask valid bit (MV bit) from each group 

M» global mask 126 (0) -126 (n-1) and, in response thereto, 

D 

n generates the group next free address NFA G. NFA G and NFA A 
M — ~~ ~ 

W may be loaded into NFA table 112 under the control of write 

m 

p 15 control circuit 116 as will be described below. Additionally, 

in 

Zl NFA_G may be provided to group decoder 117 in order to access 

s one or more of the group global masks and/or prefix data that 

□ 

m may be stored in Vbit select circuit 711. 

:H FIG. 9 is flow chart illustrating one embodiment of 

fy 

Q20 writing a new entry to array 120 and updating the NFA for the 

ru 

prefix associated with the entry. At step 902, a write 
instruction is provided to instruction decoder 140 via IBUS, 
the IP address is supplied to read/write circuit 155, and the 
prefix PFX for the IP address is provided to prefix decoder 

25 111 and to decoder 170. Prefix decoder 111 decodes PFX and 

selects a corresponding row 101 of NFA table 112 (step 904) . 
The E bit 104 for this row is provided to write control 
circuit 116. If the E bit for the selected row is not 
asserted (e.g., E = 0) , as tested in step 905, thereby 

3 0 indicating that there is not an array group 122 already 
assigned to PFX, one of the available array groups is 
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assigned PFX (step 906) if array 120 is not full. 
Specifically, index circuit 13 0 computes an NFA for PFX, and 
the new NFA is stored in the selected row 101 of NFA table 
112. Since NFA_G indicates the next free group, the new NFA 
5 is determined by group priority encoder 712 generating NFA_G 
from the MV bits of the array groups, and write control 
circuit 116 sending a control signal to NFA table 112 to load 
NFA_G into its selected row 101. The NFA_A portion of the 
selected row may be written to all zeros to indicate the 
10 first available address in this newly opened array group. The 
corresponding E bit 104 in the selected row in NFA table 112 
is then asserted to logic 1 (step 908) . 

□ 

q The new entry and its associated prefix mask are then 

IP 

fji written into array 120 as follows. Group decoder 117 decodes 

Us 

O 15 NFA_G to select the appropriate group global mask for writing 
gj the PFX_MSK of the new entry, and the corresponding MV bit is 

asserted to logic 1 (step 910) . The new NFA stored in the 

U 

\& selected row 101 is then provided to array decoder 114. In 

fij 

jy response thereto, array decoder 114 enables the corresponding 

0 20 word line of the selected array group 122 and the new entry 
is written into the selected array group (step 912) . For one 
embodiment, the IP address and PFX_MSK may be simultaneously 
written into the selected array group 122 and group global 
mask 126, respectively. For other embodiments, the IP address 
2 5 and PFX_MSK may be written into CAM array 12 0 sequentially. 

After the new entry has been written to array 120, index 
circuit 130 computes a new NFA for the selected array group 
122 (step 914) . The new NFA is determined by generating NFA_A 
from array priority encoder 716 for the associated prefix as 
30 will be described below with respect to Figure 10. NFA__A is 
then written into the selected row of NFA table 112 (step 
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918) . 

If the E bit of the selected row 101 of NFA table 112 is 
already asserted to logic 1 at step 905, thereby indicating 
that an array group 122 is already assigned to PFX, the NFA 
stored in the selected row 101 is provided to array decoder 
114 to select a row in the corresponding assigned array group 
122 (step 920) . The IP address is then written into the row 
of the array group selected by the NFA (step 922) and its V 
bit updated. Vbit select circuit 711 forwards the V bits of 
the selected array group 122 as qualified valid bits (QV 
bits) to full flag logic 715 and to array priority encoder 
716. In response thereto, array priority encoder 716 
generates a new NFA__A (step 923) , which is provided to NFA 
table 112, and full flag logic 715 determines whether the 
selected array group 122 is full, and generates FF 
accordingly (step 924) . If the selected array group 122 is 
not full, as determined in step 924, FF remains de-asserted 
to logic 0, and the new NFA__A is written to the selected row 
101 of NFA table 112 under the control of write control 
circuit 116, thereby updating NFA table 112 for the prefix 
(step 928) . For an alternative embodiment, step 924 may 
precede step 923, and step 923 may be executed if an array 
group is not full. 

If, on the other hand, the selected array group 122 
becomes full after the write operation (step 922) , full flag 
logic 715 asserts FF to logic 1, and index circuit 130 
generates a new NFA that identifies a row in a next available 
array group 122 for PFX (step 930) . Specifically, group 
priority encoder 712 generates a new NFA_G for the PFX in 
response to the MV bits and provides the NFA_G to NFA table 
112. In response to the de-asserted FF, write control circuit 
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116 causes NFA_G to be written into the selected row of NFA 
table 112 and the NFA_A portion of the table to reset to all 
zeros (step 932) . Then, the PFXJV1SK corresponding to PFX is 
written into the group global mask 126 associated with the 
next available array group 122 (step 934) , and its 
corresponding MV bit is asserted (step 93 6) , thereby 
assigning the next available array group 122 to PFX. 

For an alternative embodiment of the process described 
in Figure 9, each array group may be initially assigned a 
prefix number at reset or initialization. NFA table 112 may 
also be updated accordingly. For this embodiment, steps 906 
through 918 may not be needed. For this example, the E bits 
may not be needed for NFA table 112. 

Note that the process of Figure 9 opens a new array 
group after a write results in a full condition for an array 
group of a particular prefix number. For an alternative 
embodiment, an array group does not need to be automatically 
opened; rather, when a new write operation is received, the 
current array group assigned to the prefix of the new entry 
is checked to determine if it is full. If so, a new array 
group is opened for the prefix and the new entry and prefix 
written (and new NFA generated) . If not, then new entry is 
written (and new NFA generated) . 

Index circuit 704 uses Vbit select circuit 711 to 
generate qualified V bits for array priority encoder 716 for 
generating NFA_A , and for full flag logic 715 for generating 
FF. One embodiment of Vbit select circuit 711 is shown as 
Vbit select circuit 1000 in FIG. 10. Select circuit 1000 
includes a compare circuit 1002 and a plurality of enable 
logic circuits 1004 (0) -1004 (n-1) . Compare circuit 1002 
includes an input to receive PFX, inputs to receive the 
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prefixes stored in the group global masks, and outputs to 
provide group enable signals GEN(O) -GEN(n-l) . Enable logic 
circuits 1004 (0) -1004 (n-1) each include first inputs coupled 
to receive the V bits from a corresponding array groups 
122 (0) -122 (n-1) , a second input to receive a corresponding 
group enable signal GEN (0) -GEN (n-1) from compare circuit 
1002, and outputs to provide corresponding QV bits to 
priority encoder 716. For one embodiment, enable logic 
circuits 1004 (0) -1004 (n-1) are AND gates that qualify or 
enable the V bits to be provided to priority encoder 716 in 
response to GEN (0) -GEN (n-1) . 

Compare circuit 1002 compares prefix assignment 
information from array groups 122 with PFX to determine which 
array group or groups 122 are assigned to PFX. The array 
groups that have prefixes that match PFX have an associated 
GEN signal set to an active state by compare circuit 1002 
such that the V bits for those array groups are provided to 
priority encoder 716 and full flag logic 715 by the enable 
logic. Compare circuit 1002 deactivates all other GEN signals 
such that the V bits from those array groups that have 
prefixes that do not match PFX are not passed (as active 
signals) to priority encoder 716 and full flag logic 715. In 
response to GEN(0) -GEN (n-1) , respective logic gates 1004 (0)- 
1004 (n-1) either qualify or disqualify the V bits from 
corresponding array groups 122 (0) -122 (n-1) for consideration 
by priority encoder 716 in generating NFA_A. For example, if 
GEN(0) is activated, which indicates that array group 122(0) 
is assigned to PFX, logic gate 1004(0) allows the V bits from 
array group 122(0) to pass to priority encoder 716 and full 
flag logic 715 as QV bits. Conversely, if GEN ( 0 ) is 
deactivated, which indicates that array group 122(0) is not 
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assigned to PFX, logic gate 1004(0) disqualifies V bits from 
array group 122(0) by forcing corresponding QV bits to full 
states (i.e., indicating that these entries are full). In 
this manner, the V bits from array group 122(0) do, not 
participate in the generation of NFA_A or the FF signal for 
that particular prefix. 

The enable logic circuits 1004 may be replaced with a 
multiplexer . 

For an alternative embodiment, compare circuit 1002 may 
be compare circuit 506 of Figure 5A and enable logic circuits 
1004 may be enable logic circuits 504 of Figure 5A and one or 
more multiplexers may be added to supply either the GMF 
signals or the MV bits to the compare circuit in response to 
either a compare operation or determining NFA, respectively. 
Additionally, one or more multiplexers may be added to 
provide either the match line signals or the V bits to the 
enable logic in response to either a compare operation or 
determining NFA, respectively. 

For an alternative embodiment, as shown in FIG. 11, the 
prefixes for assigned group arrays are stored in a separate 
table 1006. Table 1006 stores prefixes PFX (0) -PFX (n-1) in 
rows 1006 (0) -1006 (n-1) , respectively, for corresponding array 
groups 122 (0) -122 (n-1) . The prefixes may be stored in table 
1006 at the same time that the prefixes are written into the 
group global masks, at reset, upon initialization, or at any 
other time. For one embodiment, the table entries may be 
accessed for reading or updating by group decoder 117 in 
response to decoding NFA_G. The prefixes may be provided to 
compare circuit 1002 for comparison with PFX as indicated 
above. For one embodiment, compare circuit 1002 and table 
1006 may be formed from the priority logic 604 and priority 
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memory 602, respectively, as shown in Figure 6. 

For an alternative embodiment, compare circuit 1002 may 
be compare circuit 506 of Figure 5B and enable logic circuits 
1004 may be enable logic circuits 504 of Figure 5B and one or 
more multiplexers may be added to supply either the GMF 
signals or the MV bits to table 508 in response to either a 
compare operation or determining NFA, respectively. 
Additionally, one or more multiplexers may be added to 
provide either the match line signals or the V bits to the 
enable logic in response to either a compare operation or 
determining NFA, respectively. 

The embodiments described herein have focused on CIDR 
address processing. However, system 100 and its various 
embodiments, may be used to store and operate upon any types 
of groups of data wherein each data group has an associated 
priority relative to the other groups. 

For one example, all of the priority numbers can be set 
to zero and CAM system 100 may operate as a traditional 
binary CAM array. 

CAM system 100 may also be used to process classfull IP 
addresses with each array group assigned to a corresponding 
class A, B, or C. 

CAM system 100 may also have its group global mask 
values decoupled from the priority numbers such that system 
100 may process different types of data not necessarily 
associated by groups with prefixes. For example, all group 
global masks may be assigned to be unmasked, and the array 
groups may operate as logical tables each storing the same or 
different types of data. The data types may be indicated by 
storing the priority numbers associated with each array group 
in table 508 of Figure 5B and/or table 1006 of Figure 11. 
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Also, priority numbers may also indicate different 
search criteria for each array group and not necessarily 
indicate priority between the arrays. 

In other embodiments of CAM system 100 of FIG. 1, binary 
CAM array 12 0 may be replaced by a ternary CAM array. This 
may be particularly useful, for example, in classification 
operations (e.g., policy-based routing) on incoming packet 
information for a router incorporating CAM system 100. 
However, other applications may also benefit from the use of 
a ternary CAM array in CAM system 100. The remainder of this 
application will discuss CAM system 100, and its various 
embodiments, using a ternary CAM array in the context of a 
policy-based routing system. However, system 100 may be used 
to store and operate upon any types of groups of data wherein 
each data group has an associated priority relative to the 
other groups . 

Policy-based routing allows packets to be routed in a 
network according to one or more criteria such as, for 
example, the source and/or destination address of the packet, 
protocol information, the cost of forwarding the packet 
through different routes or paths in the network, or the 
bandwidth available on different routes in the network. 
Policy-based routing can also be used to provide a certain 
Quality of Service (QOS) or Type of Service (TOS) to 
differentiated traffic in the network. For example, one or 
more of the various fields (e.g., the TOS bits) in the header 
of an Internet Protocol (IP) packet can be used by policy- 
based routers to forward IP packets in a network. 

A policy-based router implements a policy through the 
use of one or more policy statements that define how to 
forward the packet in the network. Each policy statement 
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contains one or more match clauses and a set clause. The 
match clauses are a series of conditions that are used to 
determine if an incoming packet satisfies a particular 
policy. If all of the match clauses of a policy statement are 
5 satisfied, the set clause specifies how the router should 
forward the packet in the network. If one of the match 
clauses of a particular policy statement is not satisfied, 
then the policy-based router investigates subsequent policy 
statements . 

10 A policy-based router can use a ternary CAM array to 

implement a filtering or classification function to determine 
whether an incoming packet matches a policy statement. The 
Q policy statements are typically stored in separate rows in 

s s 

IP the ternary CAM array. Corresponding fields or clauses of 

Ul 15 each policy statement are selectively masked on a bit-by-bit 

O 

yi basis during a compare operation with a search key associated 

with the packet to select appropriate routing information for 

O the packet. For example, each policy field that corresponds 

to a match clause for a given policy statement is unmasked by 

^?20 having its corresponding mask bits set, for example, to a 

"SS5S" 

fjj logic zero. Conversely, each policy field that does not have 

a match clause for a given policy statement is masked by 
having its corresponding mask bits set, for example, to a 
logic one. 

2 5 FIG. 13 shows a ternary CAM array 12 50 that may be used 

instead of binary CAM array 12 0 in ternary embodiments of CAM 
system 100 of FIG. 1. Ternary CAM array 1250 is segmented 
into a number of groups 0 to n-1, each of which includes a 
ternary array 1252. Each array group 1252 (0) -1252 (n-1) 

30 includes k rows of CAM cells (not shown in FIG. 13) for 

storing up to k data words, and also includes k rows of local 
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mask cells (not shown in FIG. 13) for storing local mask 
words that mask corresponding data words in the array group 
on a bit-by-bit basis. The CAM cells and local mask cells are 
paired together on a bit-by-bit basis to form rows of ternary 
CAM cells that effectively can store three states: a logic 
one state, a logic zero state, and a don't care state. 

For alternative embodiments, one or more of the array 
groups 1252 may have a different number of rows of CAM cells. 
Each row of CAM cells is coupled to a corresponding word line 
WL and a corresponding match line ML. Each row of local mask 
cells is coupled to a corresponding mask word line MWL. The 
word, mask word, and match lines for each array group 
1252 (0) -1252 (n-1) are represented collectively in FIG. 13. 

Each array group 12 52 includes an extra column 12 54 of 
CAM cells for storing a valid bit (V bit) for each row in the 
array group 1252. Each V bit indicates whether a valid word 
is stored in the corresponding row. Upon reset or power-up, 
the V bits are initially de-asserted to logic 1 so as to 
indicate that CAM array 1250 is empty, i.e., that none of the 
rows in CAM array 1250 contain valid data. When data is 
written to a row of CAM array 1250, its corresponding V bit 
may be asserted to logic 0 in a well-known manner to indicate 
that the row contains valid data. In some embodiments, each 
row of CAM array 12 50 may include two or more V bits to 
distinguish between an empty row and a row that contains 
invalid data (and may indicate other states such as, for 
instance, a skip state) . 

Each array group 1252 that stores data is assigned a 
priority number that indicates its priority relative to the 
other array groups. The array groups 1252 can be assigned any 
priority in any order, and more than one array group may be 
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assigned the same priority. Each array group 1252 (0) - 1252 (n- 
1) has a corresponding storage element 1256 (0) -1256 (n-1) for 
storing its priority number. Storage elements 1256 (0) -1256 (n- 
1) may be any types of storage elements, including volatile 
5 and non-volatile memories. In some embodiments, storage 

elements 1256 (0) -1256 (n-1) are individual storage elements. 
In other embodiments, each storage element 1256 (0) -1256 (n-1) 
is one or more rows of a single storage element. In one 
embodiment, the priority numbers for array groups 1252 are 
10 stored in a priority table. 

Each array group 1252 also has an associated group valid 
M= (GV) bit that indicates whether the array group 1252 is 

Q assigned a priority number. The GV bits for array groups 1252 

rtj may be stored in corresponding storage elements 1258, as 

0 15 shown in FIG. 13. For other embodiments, the GV bits may be 
grp stored in one or more separate storage elements. 

■ For alternate embodiments, storage elements 1256 may be 

o 

H* included within index circuit 130 (see also FIG. 1) . For one 

TU 

hi embodiment, the priority numbers and GV bits for array groups 

M20 1252 (0) -1256 (n-1) may be stored in additional columns of a 

m 

priority table priority table 600 of FIG. 6. 

Ternary CAM array 12 50 may store and operate upon any 
type of data. For network routing applications, the data 
words stored in ternary array 1250 may include, for example, 

2 5 a network routing address and/or corresponding policy 

information for the address. For example, FIG. 14 illustrates 
a row 14 00 for one embodiment of ternary CAN array 12 52 that 
may be used to store routing addresses and corresponding 
policy information such as, for instance, one or more clauses 

30 of a policy statement. Row 1400 includes a data word 1402 and 
a local mask word 1404. Data word 1402 is shown to include 
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fields to store a destination address (DA) , a source address 
(SA) , an applicable protocol (PTCL) , a type of service (TOS) , 
and other policy information (e.g., bandwidth guarantees). 
Local mask word 14 04 includes a policy mask that masks 
5 corresponding fields of CAM word 1402. Thus, local mask word 
1402 includes a destination address mask (MSK_DA) , a source 
address mask (MSK_SA) , a protocol mask (MSK_PTCL) , type of 
service mask (MSK_TOS) , and a mask for other policy 
information (MSK_other) . Note that in other embodiments, CAM 
10 word 1402 and local mask word 1404 may include any number of 
corresponding fields. In some embodiments, CAM word 1402 and 
local mask word 1404 may include dissimilar numbers of 

p fields, for example, where it is desired to leave one or more 

□ 

in fields of CAM word 14 02 unmasked. The information stored in a 

2 15 particular group can each be assigned a common priority 

jfl number that represents the priority of the entries in the 

P 

array group relative to the entries in the other array 
O groups . 

fu FIG. 15 shows a ternary array group 1500 that is one 

]jf20 embodiment of array group 1252 of FIG. 13. Array group 1500 

y 

ry is coupled to address circuit 110, read/write circuit 155, 

and comparand register 180. Further, although not shown in 
FIG. 15, array group 1500 is also coupled to index circuit 
130. Array group 1500 includes a plurality of rows that each 

25 include any number of ternary CAM cells 1306, each of which 
includes a CAM cell 1302 and a corresponding local mask cell 
1304. CAM cells 1302 may be any well-known CAM cell. Local 
mask cells 13 04 may be any well-known memory element, 
including volatile and non-volatile memory cells. The 

30 validity bits may also be included in additional columns of 
CAM cells 1302. For simplicity, connections to CLK are not 
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shown in FIG. 15. 

Each row of CAM cells 1302 is coupled to a match line ML 
and a word line WL, and each row of local mask cells 13 04 is 
coupled to a corresponding row of CAM cells 1302 and to a 
5 mask word line MWL. Each column of CAM cells 1302 and mask 
cells 1304 is coupled to a bit line BL, a complementary bit 

line BL , a comparand line CL, and a complementary comparand 

line CL . The bit lines BL and BL are coupled to read/write 
circuit 155, which in turn may enable data to be written to 
10 or read from a row of CAM cells 1302 or local mask cells 

1304. Read/write circuit 155 is well-known, and may include 

U — 

PI write drivers or buffers to provide data to BL and BL , and 

O may include sense amplifiers to determine the logic states of 

yj _ 

W BL and BL . Comparand lines CL and CL are coupled to 

0 

If! 15 comparand register 180, and provide comparand data or a 

search key to CAM cells 13 02 for comparison with data stored 

5 

O therein. 

u. 

3 — 

fU In other embodiments, comparand lines CL and CL may be 

FU — 

p eliminated, and the bit lines BL and BL used to provide 

^ 20 comparand data to CAM cells 1302. Additionally, while ternary 
array group 1500 shows columns of CAM cells 1302 and mask 
cells 1304 coupled to common bit lines, in alternate 
embodiments mask cells 1304 may be coupled to separate mask 
bit lines. Further, word lines WL and MWL may be the same 
2 5 word line. 

The word lines WL are selectively driven by address 
circuit 110 in response to either ADDR or the NFA to select 
one or more rows of CAM cells 13 02 for read and/or write 
operations. Similarly, the mask word lines MWL are 
30 selectively driven by address circuit 110 in response to 
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either ADDR or the NFA to select one or more rows of mask 
cells 1304 for read and/or write operations. Each match line 
ML indicates the match results of a compare operation for its 
corresponding row. A match line ML indicates a match 
condition for the row only if all unmasked CAM cells 13 02 in 
that row match the search key. In some embodiments, the match 
line ML is pre-charged for the compare operation. If any 
unmasked CAM cell 13 02 in the row does not match the search 
key, the CAM cell (s) 1302 discharges the match line ML toward 
ground potential (e.g., logic 0) to indicate the mismatch 
condition. Otherwise, if all unmasked CAM cells 1302 match 
the search key, the match line ML remains in a charged state 
(e.g., logic high) to indicate the match condition. 

Each CAM cell 1302 and local mask cell 1304 pair may be 
considered a mask-per-bit ternary CAM cell 13 06 in which the 
local mask cell 1304 is used to store mask data for its 
corresponding CAM cell 1302. For alternate embodiments, local 
mask cell 13 04 may be used to store mask data for more than 
one CAM cell 1302. Ternary CAM cell 1306 may be any well- 
known ternary CAM cell. 

Data is written to and read from array group 1500 in a 
manner similar to that described above with respect to FIG. 
2. Thus, to write or read a data word to or from a row of CAM 
cells 1302, address circuit 110 selects the row of CAM cells 
13 02 in response to either ADDR or NFA by asserting the 
corresponding word line WL, and read/write circuit 155 
provides the data word to, or reads it from, the selected row 

of CAM cells 13 02 over BL and BL . 

When the embodiment of Figure 13 is used with the 
address circuit 702 of Figure 7, the NFA in the ternary CAM 
array 12 50 at which to store the new data word is selected 
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from NFA table 112 according to the priority of the new data 
word. For example, the priority of the data word may be 
provided on PBUS to address circuit 110 and used to access a 
corresponding row of NFA table 112. NFA table 112 provides 
the selected NFA to address decoder 114, which in turn 
selects a corresponding row of ternary array group 1500 as 
described above. If there is not an NFA for the priority in 
NFA table 112, an unassigned array group 1252 (e.g., an array 
group whose group valid bit is not asserted) is selected by 
index circuit 130 and assigned to the priority. For each 
write operation, index circuit 130 updates the NFA stored in 
NFA table 112 for the priority. Note that because the 
priority provided to address circuit 110 for ternary 
embodiments need not be decoded, prefix decoder 111 of FIG. 7 
may be eliminated from ternary embodiments of CAM system 100. 

Similarly, to write or read a local mask word to or from 
a row of mask cells 1304, address circuit 110 selects the row 
of mask cells 1304 in response to either ADDR or NFA by 
asserting the corresponding mask word line MWL (e.g., to 
logic high) , and read/write circuit 155 provides the mask 
word to, or reads the mask word from, the selected row of 

mask cells 13 04 over BL and BL . Mask information 
corresponding to data to be stored in array group 1500 may be 
written as a local mask word to a row of mask cells 1304 
either before or after associated data is written to the 
corresponding row of CAM cells 1302. 

Index circuit 13 0 generates the NFA during write 
operations for ternary array groups 1500 (0) -1500 (n-1) based 
upon priority in a manner similar to. that described above 
with respect to FIGS. 1, 7, 8, 10 and 11. For example, the V 
bits 1254 are operated upon in a similar manner as are the V 
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bits 124 of Figure 1, the GV bits are operated upon in a 
similar manner as are the MV bits 128 of Figure 1, and the 
priority numbers per group are operated on in a similar 
manner as are the group global masks 126 of Figure 1. The 
5 index circuit may generate the NFA in response to the V bits 
from array groups 1252 (0) -1252 (n-1) and the GV bits stored in 
storage elements 1256 (0) -1256 (n-1) . Specifically, those 
assigned array groups that have assigned priority numbers 
that matches the priority of the data word to be written into 
10 CAM array 1250 will cause corresponding enable logic circuits 
to generate qualified V bits (QV bits) for use by array 
priority encoder 716 and full flag logic 715. All other V 
bits are disqualified. Additionally, the comparison of the 

priority numbers may be qualified by the states of the GV 

ui 

Q15 bits such that only those array groups that have been 

fji 

j^jg assigned priority numbers participate in a comparison with 

^ the priority number of the new data entry. 

jh& FIG. 16 is flow chart illustrating one embodiment of 

hj 

p writing a new data entry to array 1250 and updating the NFA 

0 20 for the priority associated with the entry. At step 1602, a 

jU 

write instruction is provided to instruction decoder 140 via 
IBUS, the data entry is supplied to read/write circuit 155, 
and the priority for the data entry is provided to NFA table 
112 and to decoder 170. The priority for the entry is used to 

25 select a corresponding row 101 of NFA table 112 (step 1604) . 
The E bit 104 for this row is provided to write control 
circuit 116. If the E bit for the selected row is not 
asserted (e.g., E = 0) , as tested in step 1606, thereby 
indicating that there is not an array group 12 52 that has the 

3 0 same priority as the data entry, one of the available array 
groups is assigned to the priority number (step 1608) . Index 
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circuit 13 0 computes an NFA for the priority, and the new NFA 
is stored in the selected row 101 of NFA table 112. Since 
NFA_G indicates the next free group, the new NFA is 
determined by group priority encoder 712 generating NFA_G 
from the group valid bits for the array groups, and write 
control circuit 116 sending a control signal to NFA table 112 
to load NFAJ3 into its selected row 101. The NFA_A portion of 
the selected row may be written to all zeros to indicate the 
first available address in this newly opened array group. The 
corresponding E bit 104 in the selected row in NFA table 112 
is then asserted to logic 1 (step 1610) . 

The new entry is then written into array 1250 as 
follows. Group decoder 117 decodes NFA_G to select the 
appropriate array group for the new entry, and the priority 
associated with the new data entry is stored in storage 
element 1256 as the priority number assigned to the selected 
array group. Also, the GV bit corresponding to the selected 
array group is asserted to logic 1 (step 1612) . The new NFA 
stored in the selected row 101 is then provided to array 
decoder 114. In response thereto, array decoder 114 enables 
the corresponding word line of the selected array group 1252 
and the new entry is written into the selected array group 
(step 1614) . After the new entry has been written to array 
1250, index circuit 130 computes a new NFA for the selected 
array group 1252 (step 1616) . The new NFA is determined by 
generating NFA_A from array priority encoder 716 for the 
associated priority as described above with respect to Figure 
10 and/or Figure 11 using the priority numbers per group 
instead of the group masks. NFA_A is then written into the 
selected row of NFA table 112 (step 1618) . 

If the E bit of the selected row 101 of NFA table 112 is 
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already asserted to logic 1 at step 1606, thereby indicating 
that an array group 1252 is already assigned to the priority 
of the data entry, the NFA stored in the selected row 101 is 
provided to array decoder 114 to select a row in the 
corresponding assigned array group 1252 (step 162 0) . The data 
entry is then written into the row of the array group 
selected by the NFA (step 1622) and its V bit is updated. V 
bit select circuit 711 forwards the V bits of the selected 
array group 1252 as qualified valid bits (QV bits) to full 
flag logic 715 and to array priority encoder 716. In response 
thereto, array priority encoder 716 generates a new NFA_A 
(step 1624), which is provided to NFA table 112, and full 
flag logic 715 determines whether the selected array group 
1252 is full, and generates FF accordingly (step 1626) . If 
the selected array group 122 is not full, as determined in 
step 1626, FF remains de-asserted to logic 0, and the new 
NFA_A is written to the selected row 101 of NFA table 112 
under the control of write control circuit 116, thereby 
updating NFA table 112 for the priority (step 1628) . For an 
alternative embodiment, step 1628 may precede step 1624, and 
step 1624 may be executed if an array group is not full. 

If, on the other hand, the selected array group 1252 
becomes full after the write operation (step 1626) , full flag 
logic 715 asserts FF to logic 1, and index circuit 130 
generates a new NFA that identifies a row in a next available 
array group 1252 for the priority (step 1630) . Specifically, 
group priority encoder 712 generates a new NFA_G for the 
priority in response to the GV bits and provides the NFA_G to 
NFA table 112. In response to the de-asserted FF, write 
control circuit 116 causes NFA_G to be written into the 
selected row of NFA table 112 and the NFA_A portion of the 
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table to reset to all zeros (step 1632) . Then, a new array 
group can be assigned the priority number. For example, the 
priority of the data entry is stored as the priority number 
of the selected array group (step 1634) , and its group valid 
5 bit is asserted (step 1636) , thereby assigning the next 
available array group 1252 to the priority. 

For compare operations, comparand register 180 provides 
the search key from CBUS to comparand register 180, and a 
priority associated with the search key is provided to index 
10 circuit 130 (see also FIG. 1) . As shown, for example, in 

Figure 15, comparand register 180 provides bits of the search 

O key to corresponding cells 13 02 in each row of array group 

0 - - _ 

01 1500 via comparand lines CL and CL . The mask cells 1304 

\p 

selectively mask comparison of the search key with data 

Ull5 stored in cells 1302 according to mask bits stored in the 

W 

B * mask cells. If all unmasked CAM cells 1302 in a row indicate 

P a match condition, a match condition is indicated on the 

& 

fU corresponding match line ML. If one or more unmasked CAM 

ru 

q cells 1302 indicate a mismatch condition, a mismatch 

^20 condition is indicated on the match line. For one embodiment, 
a mask bit of logic zero indicates that corresponding data is 
not to be masked, and a mask bit of logic one indicates that 
corresponding data is to be masked. For other embodiments, 
polarity of the mask bits may be reversed. 
25 Match results from all array groups 1252 (0) -1252 (n-1) 

are provided to index circuit 13 0, which in turn determines 
which matching entry has the highest priority number 
associated with it and generates the HPI in a manner similar 
to that described above with the respect to FIGS. 1, 3, 4, 
3 0 5A, 5B, 6 and 12. In these embodiments, the group global 

masks 126 are replaced with the priority numbers stored in 
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storage elements 1256. For example, during compare 
operations, all matching entries (as masked by their local 
mask cells) are reflected on the match lines of the 
respective groups and the match results provided to index 
circuit 130. Index circuit 130 determines the matching entry 
that has the highest priority number associated with it and 
generates the index or address of this highest priority 
matching entry (HPI) . If there are multiple array groups that 
have matching entries and they have the same priority number, 
or if there are multiple matching entries within a single 
array group, index circuit 13 0 determines HPI based on which 
matching entry is stored in the lowest numerical address of 
array 120. For alternative embodiments, index circuit 130 may 
determine HPI based on entries stored in array 12 0 in other 
predetermined arrangements (e.g., at the highest numerical 
address) . 

FIG. 17 shows a flow chart illustrating one embodiment 
of compare operation for ternary embodiments of CAM system 
100. At step 1700, a search key and associated priority are 
provided to CAM array 1250. The search key is compared with 
entries stored in array groups 1252 (0) -1252 (n-1) as masked by 
the local mask words (step 1702) . For each matching entry, 
the corresponding match line ML is asserted to indicate the 
match condition. If there is a match in one or more array 
groups 1252 (0) -1252 (n-1) , as tested in step 1704, the ML 
select circuit 3 02 uses the priority number assignments (from 
storage elements 1256) for array groups 1252 (0) -1252 (n-1) to 
select which of the array groups 1252 (0) -1252 (n-1) has the 
highest priority among the priority numbers (step 170 6) . In 
response thereto, ML select circuit 302 qualifies or allows 
the match signals from the selected array group 1252 to pass 
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to priority encoder 304, and disqualifies the match signals 
from all other array groups by, for instance, forcing their 
corresponding qualified match lines QML to a mismatch state 
(e.g., ground potential) (step 1708). If more than one array 
group 12 52 that has a matching entry, and each have the same 
priority, ML select circuit 302 enables the match signals 
from each such "matching" array group 1252 to pass through to 
priority encoder 304. Priority encoder 304 then generates HPI 
in response to the qualified match signals on QML (step 
1710) . Because only the match signals corresponding to the 
matching array group (s) that match have the highest priority 
are considered by priority encoder 3 04, priority encoder 3 04 
can generate the appropriate HPI regardless of how the 
priorities are assigned to the various array groups. That is, 
the array groups do not have to be sorted by physical 
location. Any priority number can be assigned to any array 
group . 

Note that the "highest priority" of the priority numbers 
can be the smallest numerical priority number, the largest 
numerical priority number, or can be any other predetermined 
selection among the priority numbers. 

By segmenting CAM array 1250 into a plurality of array 
group 1252 (0) -1252 (n-1) , and assigning each array group 
1252 (0) -1252 (n-1) to a particular priority, present 
embodiments are able to perform policy based routing 
functions according to priority, thereby allowing for 
selective searching according to assigned priorities of 
routing address and policy information stored in array 1250. 
Further, ternary embodiments of CAM system 100 allow new 
entries to be written into CAM array 1250 without having to 
re-prioritize or re-order existing entries, thereby 
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eliminating or reducing the overhead for table management 
hardware and/or software tools used to maintain a proper 
priority ordering. 

It should be also appreciated that in other embodiments, 
the circuitry and components described above to determine NFA 
for a new entry may be omitted, and the NFA may be maintained 
by other components and/or software that is in communication 
with the CAM systems described above. 

While particular embodiments of the present invention 
have been shown and described, it will be obvious to those 
skilled in the art that changes and modifications may be made 
without departing from this invention in its broader aspects 
and, therefore, the appended claims are to encompass within 
their scope all such changes and modifications as fall within 
the true spirit and scope of this invention. 
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